I'm an Identity and Access Management professional with hands-on experience managing enterprise-scale identity infrastructure in a critical infrastructure environment. My work centers on Privileged Access Management, hybrid identity architecture, and increasingly, AI-assisted IAM automation — using Microsoft Graph, PowerShell, and Azure OpenAI to build smarter, faster identity workflows.
I believe the future of IAM isn't just about managing access — it's about automating governance, detecting anomalies intelligently, and enforcing least-privilege principles at scale without slowing the business down.
This GitHub is where I build and share that work publicly.
Identity & Access Management ████████████████████ Enterprise-scale
Privileged Access Management ████████████████████ BeyondTrust Certified
Microsoft Entra ID / Azure AD ███████████████████░ Deep hands-on
PowerShell + Graph Automation ████████████████░░░░ Active development
AI-Assisted IAM Workflows ████████████░░░░░░░░ Building now
| Certification | Issuer | Status |
|---|---|---|
| 🏆 BeyondTrust Password Safe Administrator | BeyondTrust | ✅ Active |
| 🏆 SC-900: Security, Compliance & Identity Fundamentals | Microsoft | ✅ Earned Apr 2024 |
| 📚 SC-300: Microsoft Identity & Access Administrator | Microsoft | 🔄 In Progress |
| 📋 AZ-500: Azure Security Engineer Associate | Microsoft | 🎯 Planned Q4 2026 |
| 📋 Okta Certified Professional | Okta | 🎯 Planned Q3 2026 |
Production-ready PowerShell scripts for automating identity lifecycle operations using the Microsoft Graph SDK. Built for IAM engineers and consultants who need reliable, auditable, least-privilege automation.
Scripts available:
New-EntraUser.ps1— Interactive user provisioning with loop support, group assignments, forced password reset, and full audit loggingRemove-EntraUser.ps1— Six-step structured offboarding: revoke sessions → disable → randomize password → remove groups → clear manager → optional deletionGet-StaleAccounts.ps1— Stale account detection with CSV export for access review and remediation workflowsGet-UserAccessReport.ps1— Full role and group membership reporting per user — ideal for access reviews and audit requestsGet-ConditionalAccessReport.ps1— Audit and export all Conditional Access policies for compliance documentation and gap analysisImport-EntraUsersFromCsv.ps1— Bulk user provisioning from CSV — automates high-volume onboarding workflows at scaleNew-EntraGroup.ps1— Security and Microsoft 365 group creation with static or dynamic membership, owner assignment, and duplicate detection
Coming next:
Add-EntraGroupMember.ps1— Bulk and individual group membership management with audit loggingGet-MFAStatusReport.ps1— Organization-wide MFA enrollment and compliance status reportingGet-PrivilegedRoleReport.ps1— Privileged role assignment audit across Entra ID — flags standing access and PIM eligibility gaps
Integrating Azure OpenAI with Microsoft Graph to build intelligent identity automation — moving beyond scheduled scripts toward context-aware, anomaly-detecting IAM pipelines.
Planned projects:
- AI Access Review Summarizer — Pull group membership data via Graph, pass to Azure OpenAI, generate plain-English executive summary for non-technical stakeholders
- Stale Access Anomaly Detector — Flag unusual access patterns using AI scoring against baseline identity behavior
- Natural Language IAM Query Tool — Ask questions about your Entra ID tenant in plain English, get structured answers
Identity Platforms: Microsoft Entra ID · Active Directory · BeyondTrust Password Safe
Microsoft Graph: User lifecycle · Group management · Conditional Access · PIM · Identity reporting
Protocols: OAuth 2.0 · SAML · OIDC · RBAC · MFA · SSO · Conditional Access
Automation: Microsoft Graph PowerShell SDK · Azure CLI · PowerShell scripting · Python
I work at the intersection of three areas that are increasingly converging in enterprise security:
1. Identity Governance — Making sure the right people have the right access, and nothing more. Lifecycle management, access reviews, privilege reduction.
2. Privileged Access Management — Protecting the accounts that can do the most damage. Credential vaulting, session governance, just-in-time access.
3. AI-Assisted Automation — Using Microsoft Graph + Azure OpenAI to build workflows that don't just execute tasks, but reason about identity data and surface insights human administrators would miss.
Daily driver: Pop!_OS | Dev server: Ubuntu 22.04 LTS
Actively running and maintaining open source security infrastructure in my home lab:
- OPNsense — Enterprise-grade firewall and routing on a dedicated VP2410 4-port Intel Celeron J4125 appliance. Handles network segmentation, VPN, and perimeter security for the lab environment
- Wazuh — SIEM and XDR platform for security monitoring, threat detection, and identity-related event correlation
- Pi-hole — Network-level DNS filtering and traffic visibility across the lab environment
Building toward integrating open source IAM tooling alongside my Microsoft identity stack — including Keycloak, OpenLDAP, and HashiCorp Vault — to develop platform-agnostic identity and secrets management skills.
- IAM consulting engagements — implementations, assessments, architecture reviews
- Contract and fractional IAM work — remote, part-time or project-based
- Collaboration on open-source IAM tooling and automation projects
Building toward a future where identity security is intelligent, automated, and accessible.